You might see that the Dropbox Community team have been busy working on some major updates to the Community itself! So, here is some info on what’s changed, what’s staying the same and what you can expect from the Dropbox Community overall.
Forum Discussion
An employee's email was used to create a malicious Dropbox account
I'm hoping someone here will be able to provide further assistance on this issue.
One of our employee's mailboxes got compromised. While compromised, the bad actor setup a Dropbox account that is n...
It is a personal Dropbox account. I am not sure if they've changed the email address yet.
I'm assuming it has not been changed, because we're getting emails forwarded from this employee's clients, and it is showing his company email address still.
The sending email is no-reply@dropbox.com but the body of the email has employee's name/company email in it. Example of the email one of his client's received.
Elements of the email have been obfuscated for the privacy of the end user/client. I am happy to provide more detailed information to the support team.
The ticket number for this is #24476652. Please let me know if any further information is needed.
Thank you,
Nick
Mark
Super User II
Super User IIIf its using the employee email the quickest and easiest way to resolve this is to go to www.dropbox.com/forgot and request a reset of the password. Then log in and close/delete the account yourselves.
Hi Mark,
We attempted this to no avail. You cannot reset the password. The Drobox account is secured by MFA, that the bad actor controls.
We have access to the email, but without control over MFA, we cannot reset the password. This is not a viable option in our case.
